🇩🇪
LRob
2026-09-15 07:49:58
(1 day ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-15 07:49 UTC
show less
Bad Web Bot
🇩🇪
LRob
2026-09-15 04:52:11
(1 day ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /les-certifies-process-communication-model/ | 2026-09-15 04:52 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-03 12:42:46
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 08:42:36.168085 2026] [security2:error] [pid 14584:tid 14584] [client 191.102.129.151:61825] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "aplrPLuIGn4deDKwZSVtRwAAACc"], referer: http://CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 13:35:59
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:35:55.620036 2026] [security2:error] [pid 26485:tid 26485] [client 191.102.129.151:31531] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||constructionloansfunding.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "constructionloansfunding.com"] [uri "/mailto:[email protected] "] [unique_id "ao7ru8GIPnp00sP3Yetf7QAAAA4"], referer: http://constructionloansfunding.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 10:11:52
(1 month ago)
FortiWeb WAF: 22 attacks detected. Threat Score: 11214830. Types: Client Management(11), Signature D ...
show more
FortiWeb WAF: 22 attacks detected. Threat Score: 11214830. Types: Client Management(11), Signature Detection(11). Origin: United States.
show less
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(3 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 157cd6d7-1140-4c75-95c6-4a267aae4754
DDoS Attack
🇱🇻
garmtech.com
2026-05-15 17:20:09
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-20.191.102.129.151.web-spam ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 20-20.191.102.129.151.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
2026-03-05 18:06:02
(6 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 02:08:30
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:08:25.989733 2026] [security2:error] [pid 2851:tid 2851] [client 191.102.129.151:55431] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||CapitalSwissCorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "aZ0IGd0VJg6hRkBK0yq5sQAAABo"], referer: http://CapitalSwissCorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-01-17 00:53:50
(7 months ago)
191.102.129.151 - - [17/Jan/2026:00:52:56 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 18508 "htt ...
show more
191.102.129.151 - - [17/Jan/2026:00:52:56 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 18508 "https://ccoo.app" rt="0.333" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" "-" h="ccoo.app" sn="ccoo.app" ru="/mailto:[email protected] " u="/index.php" ucs="-" ua="unix:/var/run/php/ccooapp82.sock" us="404" uct="0.000" urt="0.333"
191.102.129.151 - - [17/Jan/2026:00:52:57 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 18508 "https://ccoo.app" rt="0.437" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36" "-" h="ccoo.app" sn="ccoo.app" ru="/mailto:[email protected] " u="/index.php" ucs="-" ua="unix:/var/run/php/ccooapp82.sock" us="404" uct="0.000" urt="0.437"
191.102.129.151 - - [17/Jan/2026:00:52:58 +0000] "GET /mailto:[email protected] HTTP/1.1" 404 18507 "https://ccoo.app" rt="0.326" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch
...
show less
Bad Web Bot
2026-01-12 06:41:37
(8 months ago)
Automated report (2026-01-12T01:41:37-05:00). Caught probing for exposed SQL dumps.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-05 10:29:09
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 191.102.129.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 05:29:04.022678 2026] [security2:error] [pid 27034:tid 27034] [client 191.102.129.151:64115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com:80|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/mailto:[email protected] "] [unique_id "aVuScCz6aWybDulBxbPx7AAAAAc"], referer: http://capitalswisscorp.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kranem
2025-10-01 18:00:13
(11 months ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 394474 (WHITELABELCOLO393)
Protocol: HTTP ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 394474 (WHITELABELCOLO393)
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /
Timestamp: 2025-10-01T16:43:37Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36
show less
Bad Web Bot
2025-02-27 22:41:26
(1 year ago)
wordpress-trap
Web App Attack
2025-02-26 17:17:16
(1 year ago)
wordpress-trap
Web App Attack